Data Protection

These data protection dissertation examples are student-contributed and focus on how personal data is collected, used, shared, and safeguarded in practice. Students often examine the gap between policy and reality: what organisations say they do, what systems actually enable, and how individuals experience privacy, consent, and control.

Common dissertation directions include lawful bases and consent in real user journeys, transparency and privacy notices, data minimisation, retention practices, and how organisations handle data subject rights (access requests, deletion, objection). Many projects explore high-risk processing such as profiling and automated decision-making, biometric data, location tracking, and children’s data in apps and platforms. Governance themes often include accountability documentation, DPIAs, vendor and international transfer risk, breach response and notification, and how compliance is managed across complex supply chains and outsourced services. Students also look at enforcement and trust: whether “privacy by design” is implemented meaningfully, how security failures translate into harm, and what makes people willing (or unwilling) to share data with banks, employers, public bodies, healthcare providers, and social media platforms.

These examples can help you choose a tight focus (for example, consent, DSAR handling, biometrics, international transfers, or breach response) and frame it around real-world risks, rights, and organisational constraints.